TOP SECRET//S1//NOFORN 


Version 24 (Final) 




COURSE: (TS//SI//NF) OVSC1205 Special Training on FISA (Analytical) 


Last Updated 10/6/11 




COURSE: (TS//SI//NF) OVSC1206 Special Training on FISA (Technical) 


Includes CAO Review feedback 




Module 5: (U) The Analytical and Technical Work Roles 





DATE/PREPARER: SLS 



Topic 

(U) Module 
Introduction 



Home 



Page Classification 
TOP SECRET//S I //NOFORN 



Exit 



Glossary 



Screen Number 
1 of 8 



Back 



Next 



FRAME ID: 5010 



NEXT FRAME ID: 5020 



BACK FRAME ID: n/a 



(U) Module 5 

(U) The Analytical and Technical Work Roles 

(U) This module will enable you to: 

• (U) Compare and contrast the analytical and technical work roles 

• (U) Identify analytical and technical personnel’s authorization to touch the data 

• (U) Identify how the authorities impact interactions with other roles and the data 
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(U) (Technical Character): During this part of our trip we will compare and contrast the analytical and technical work roles and provide you with a basic 
knowledge of the two distinct areas. This will serve as an introduction to the more role-specific module you will complete later. 

(U) This module will enable you to: 

• (U) Compare and contrast the analytical and technical work roles 

• (U) Identify analytical and technical personnel’s authorization to touch the data 

• (U) Identify how the authorities impact interactions with other roles and the data 
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(U) The Analytical Work Role 
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( TS//S I //NF ) The Analytical Work Role includes these primary functions: 

• HMC 

• Those who conduct intelligence analysis queries 

• Those who can view and disseminate the results of intelligence analysis queries 
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( TS//S I //NF ) (HMC Character): The analytical work role includes three primary functions: Homeland Mission Coordinators (HMC), those who can conduct 
intelligence analysis queries, and those who can view and disseminate the results of intelligence analysis queries. 

( TS / /S I/ / N F ) Homeland Mission Coordinators, or HMCs, review and approve the RAS nominations. The analysts and HMCs work through the RAS approval 
process together to get the identifiers RAS-approved. 

( TS / /S I/ / N F ) Recall from the last module that not all analvsts ar^enmitted to conduct contact chaining queries. Those who are permitted to conduct 
queries of the bulk metadata have been ^^credentials. Those who are permitted to view and disseminate query results, but 

not conduct queries, have been granted credentials. 




TOP SECRET//SI//NOFORN 
Page 2 of 10 



TOP SECRET//SI//NOFORN 



DATE/PREPARER: SLS 



Topic 

(U) The Technical Work 
Role 



Page Classification 



Screen Number 
3 of 8 



TOP-SECRE T //S I //NO FORN 



Home 



Exit 



Glossary 



Back 



Next 



FRAME ID: 5030 



(U) The Technical Work Role 



NEXT FRAME ID: 5040 



(T5#SI //NF ) The Technical Work Role is made up of two main functions: 

• Support to Collection and Metadata 

• Support to Storage, Presentation, and Maintenance 
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( TS//S I //N F) (Technical Character): The work performed by technical personnel in support of the Bulk Metadata Programs assists everyone working in 
support of these programs to maintain complia nce with ap plicable legal documents and relevant authorities. Within the technical roles, there are two main 
areas of responsibility: collection and metadata ^^^^^and the storage, presentation, and maintenance of the metadata. 

(TS//SI//NF) Some high-level examples of how key organizations support collection and metadata ^^^^^include: 

gain access to BR and PR^^rietadata. 

• protocol processing software that supports the collection and metadata^^^^^^nd standardization. 

• Mission Capabilities (TD) integrates the BR and PR/TT protocol processing software into the larger exploitation systems. 

( TS / /S I/ / NF) Mission Capabilities also support the storage, presentation, and maintenance aspects of the Bulk Metadata 

Programs, and some high-level examples include: 

• Mission Capabilities manages the BR and PR/TT repositories, as well as prepares the metadata for the analysts to use. 

• provides reasonable assurance that the data is normalized and presented in a usable format and provides support to 



intelligence analysts. 



TOP SECRET//SI//NOFORN 
Page 3 of 10 





TOP SECRET//SI//NOFORN 



DATE/PREPARER: SLS 



Topic 

(U) Authorization to 
Touch the Data 



Home 



Page Classification 

TQP-SEGRET //S 1 //N QFQRN 



Exit 



Glossary 



Screen Number 
4 of 8 



Back 



Next 



FRAME ID: 5040 



NEXT FRAME ID: 5050 



(U) Authorization to Touch the Data 

(U) Analytical and technical personnel have different authorization to touch the metadata 
due to the nature of their work roles 
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(U) Authorization for Analytical Personnel 
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Authorizations for Technical Personnel 

Create, test, and implementtoolstom^e this 
personnel to use (TS 

opriately control analyst’s access 
Perform processes to make the data usable 
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Validation 

Defeat of collection 

Processing 

Analysis of high-volume identifiers 
Maintenance of records to demonstrate compliance 



( TS//S I //N F) (Technical Character): As we have discussed throughout the course, the sensitivity of the data drives many of the policies and restrictions that 
control access to the BR and PR/TT bulk metadata. However, because of the different roles and responsibilities of analytical and technical personnel, both 
have different authorizations to touch the metadata. Recall from Module 1 we defined “touching the data” as any form of data handling that creates an 
opportunity for a violation of the FISC Orders to occur. These activities may include data acquisition, modifying/preparing the data, querying, viewing results 
of the queries, and even oversight and compliance functions. 

Analytic Personnel Info (audio file name OVSC_1 205_M5_5040_A): 

( TS//S I //N F) (HMC Character): Analytic personnel have authorization to touch the metadata to perform intelligence analysis. Analyst actions, such as 
querying the metadata for intelligence analysis purposes, must be done in a controlled way via tools designed to limit intelligence analysis access to RAS- 
approved identifiers and to the appropriate number of hops. Using these tools also provides reasonable assurance that these queries are tracked and 
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audited. 

Technical Personnel Info (audio file name OVSC_1 205_M5_5040_T): 

(TS//SI //NF ) (Technical Character): Technical personnel create, test, and implement tools to make this data easier for analytic personnel to use, while 
validating that safeguards appropriately control analysts’ access to the bulk metadata. Additionally, technical personnel may access the metadata to 
perform those processes needed to make the metadata usable for int elligence. ana lysis. These processes may include metadata validation; the defeat 
of the collection, processing, or analysis of metadata associated with ^^^^^^■identifiers; and the maintenance of records to demonstrate 
compliance with the terms of the authority. 

(TS//SI//NF) In order to do this work effectively, technical personnel are allowed to access the metadata using identifiers that are not RAS-approved. In the 
case of identifiers, technical personnel may use non-RAS-approved identifiers to query the metadata to confirm if the identifier is a5H 

m^dentifier and thus should not be included for target analysis. They may then share the identifier and the fact that it is a^^^^^^|identifier 
with authorized personnel. However, no other information resulting from such queries can be used for intelligence analysis purposes. 

(TS//SI //NF ) Techni cal person nel must take great care with their responsibilities because they may be accessing the data through tools that do not have 
safeguards, such as that impose restrictions and minimize the chances of a violation of the FISC Orders. As a result, we need to maintain 

boundaries between technical and analytical personnel, and be crystal clear as to the circumstances under which the two groups can interact. 
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( TS / /S I/ / N F ) All interactions must be based on RAS-approved identifiers and those results found within the 
number of hops authorized for intelligence analysis purposes 



(U) Insert image of HMC Character and 
Technical Character sitting at a table 



( TS//S I //NF ) (Technical Character): As we just discussed, analytical and technical personnel have different authorizations to touch this metadata. 
Because of these differe nt authorizati ons, we must be careful when the two types of personnel are interacting with regard to this metadata. Specifically, 
outside of the sharing of identifiers for defeat purposes, technical personnel should only be providing analytical personnel information 
under certain conditions. 

( TS//S I //NF ) (HMC C haracter^: Som etimes, when analyzing the results of intelligence analysis queries, one or more of the specific results may seem out 
of the ordinary. Is it a gMB identifier that was overlooked? Is the identifier misnormalized? Is there something that just seems out of place? Or 
perhaps there is a particular data field in your results that you don’t understand. In such instances, intelligence analysts may require assistance from 
certain technical personnel responsible for data integrity functions. 

( TS / /S I/ / N F ) (Technical Character): In these instances, technical personnel may assist authorized intelligence analysts, but any and all assistance must 
be based on RAS-approved identifiers and those results found within the number of hops authorized for intelligence analysis purposes. Essentially, 
when providing information to analytical personnel in these circumstances, the technical personnel must abide by the rules for the analytical personnel. 

( TS//S I //NF ) (Technical Character): In the end, all personnel have a vested interest and shared responsibility in ensuring that only the most accurate 
intelligence information is reported to customers, while abiding by the policies and requirements in place for this metadata. 
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(U) Knowledge Check 
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1 . (T S // S P/ NF ) TRUE or FALSE: Technical personnel and analytic work roles have the same authorization to 
touch the bulk metadata. 

a) TRUE 

b) FALSE 
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2. (T S // S P/ NF ) The Analytic Work Role includes these functions: intelligence analysts who query the data, 

intelligence analysts who can view the results of intelligence analysis queries, and . 

a) Mission Capabilities (TD) 




3. (T S # S t# NF ) The Technical Work Roles are comprised of two general areas of responsibility including 1) 
and 2) . 

a) 1) collection and metadata reviewing RAS nominations 

b) 1) collection of content, 2) storage, presentation, and maintenance of the metadata 



c) 

d) 



1) reviewing RAS nominations, 2) working with the telecommunications partners 

1) collection and metadata^^^^^f 2) storage, presentation, and maintenance of the 
metadata 



(U) (Technical Character): Let’s make a few notes in our travel journal and see what we remember from this topic. 



ANSWERS: 

Question 1 . (T S / /S I/ /NF ) Correct! The answer is b) FALSE. Technical personnel have authority to make the metadata usable for intelligence analysis, while 
analytical personnel can only touch the bulk metadata for intelligence analysis purposes using RAS-approved identifiers within the authorized number of 
hops. 

(T S // S P/ NF ) Incorrect. The correct answer is b) FALSE. Technical personnel have authority to make the metadata usable for intelligence analysis, while 
analytical personnel can only touch the bulk metadata for intelligence analysis purposes using RAS-approved identifiers within the authorized number of 
hops. 
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Question 2. ( TS//S I //NF ) Correct! The correct answer is c). The Analytical Work Role includes analysts and Homeland Mission Coordinators (HMC). 
( TS//S I //NF ) Incorrect. The correct answer is c). The Analytical Work Role includes analysts and Homeland Mission Coordinators (HMC). 

Question 3. (TS//SI//NF) Right! The correct answer is d). The Technical Work Roles are comprised of two general areas of support including collection and 
metadata well as storage, presentation, and maintenance of the metadata. 

(TS//SI//N F) Incorrec t. The correct answer is d). The Technical Work Roles are comprised of two general areas of support including collection and 
metadata i welj_a s storage, presentation, and maintenance of the metadata. 
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4. ( TS//S I //NF ) staff have access to the bulk metadata in order to prepare the metadata for 

the analysts 

a) BMBBI 

b) Mission Capabilities (TD) 

c) Analytical 

d) Office of General Counsel (OGC) 



5. (TS//S I //NF ) If an intelligence analyst seeks assistance from technical personnel, technical personnel 
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b) 




c) 




d) 




e) 



can query the metadata to confirm the analyst’s results and point out potentially noteworthy 
contacts at the third or fourth hop 

should explain that they are unable to assist in any way, except to identifyj^^^^^^^ 
identifiers 

may offer assistance, but must be cautious that any results shared or discussed are 
based on a RAS-approved identifiers and those results that fall within the number of hops 
authorized for intelligence analysis purposes 

should provide whatever assistance is needed, but make a note of it in case anyone in 
management has questions later 

should decline to assist because technical personnel should not assist intelligence analysts 



(No audio or transcript on this page) 



Question 4. (T S/ / SI/ / N F) Correct! Mission Capabilities staff has access to the bulk metadata in order to prepare the metadata for the analysts to use. 
(T S/ / SI/ / N F ) Incorrect. The correct answer is b). Mission Capabilities staff has access to the bulk metadata in order to prepare the metadata for the analysts 
to use. 

Question 5. (TS//S I //NF) Correct! If an intelligence analyst seeks assistance from technical personnel, technical personnel may offer assistance, but 
must be cautious that any results shared or discussed are based on RAS-approved identifiers and those results that fall within the number of hops 
authorized for intelligence analysis purposes. 

(TS//S I //NF ) Incorrect. The correct answer is c). If an intelligence analyst seeks assistance from technical personnel, technical personnel may offer 
assistance, but must be cautious that any results shared or discussed are based on RAS-approved identifiers and those results that fall within the 
number of hops authorized for intelligence analysis purposes. 
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(U) Summary 

(U) Now that you have completed this module you should be able to: 

• (U) Compare and contrast the analytical and technical work roles 

• (U) Identify analytical and technical personnel’s authorization to touch the data 

• (U) Identify how the authorities impact interactions with other roles and the data 
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(U) (Technical Character): Now that we have 

• (U) Compare and contrast the analyt 

• (U) Identify analytical and technical p 

• (U) Identify how the authorities impai 

(TStfSP/NF) (Technical Character): Now that 
specific module that will go into additional del 


completed this part of our road trip, you should be able to: 
ical and technical work roles 
•ersonnel’s authorization to touch the data 
Dt interactions with other roles and the data 

you are aware of the various roles that support the BR and PR/TT Programs you will move on to your role- 
tail on topics relevant to your responsibilities. 
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